use kubernetes-replicator

Author: angelnu

base/namespaces/authentik.yaml

@@ -2,8 +2,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: authentik
-  labels:
-    cert-manager: CLUSTER_DOMAIN_CERT
 
 ---
 kind: NetworkPolicy

base/namespaces/maddy.yaml

@@ -2,8 +2,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: maddy
-  labels:
-    cert-manager: CLUSTER_DOMAIN_CERT
 
 ---
 kind: NetworkPolicy

base/sources/appscode.yaml

@@ -3,7 +3,6 @@ kind: Kustomization
 namespace: flux-system
 resources:
   - angelnu-helm-charts.yaml
-  - appscode.yaml
   - authentik.yaml
   - bitnami.yaml
   - bjw-s-helm-charts.yaml
@@ -15,6 +14,7 @@ resources:
   - jetstack-charts.yaml
   - kubernetes-dashboard.yaml
   - kubereboot-charts.yaml
+  - mittwald.yaml
   - nextcloud.yaml
   - node-feature-discovery-charts.yaml
   - raspberrymatic.yaml

base/sources/kustomization.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: mittwald
+  namespace: flux-system
+spec:
+  interval: 2h
+  url: https://helm.mittwald.de
+  timeout: 3m

base/sources/mittwald.yaml

@@ -69,4 +69,4 @@ spec:
   - '*.${CLUSTER_DOMAIN_DUMMY}.${CLUSTER_DOMAIN}'
   secretTemplate:
     annotations:
-      kubed.appscode.com/sync: "cert-manager=CLUSTER_DOMAIN_CERT" # Sync certificate to matching namespaces
+      replicator.v1.mittwald.de/replicate-to: "authentik,maddy"

core/cert-manager/certificate.yaml

@@ -0,0 +1,44 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: kubernetes-replicator
+  namespace: system-controllers
+spec:
+  interval: 30m
+  chart:
+    spec:
+      # renovate: registryUrl=https://windmill-labs.github.io/windmill-helm-charts/
+      chart: kubernetes-replicator
+      version: 2.9.2
+      sourceRef:
+        kind: HelmRepository
+        name: mittwald
+        namespace: flux-system
+  maxHistory: 2
+  install:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  uninstall:
+    keepHistory: false
+  values:
+    image:
+      repository: quay.io/mittwald/kubernetes-replicator
+      tag: v2.9.2
+    grantClusterAdmin: false
+    args:
+      - -resync-period=5m
+    securityContext:
+      capabilities:
+        drop:
+          - ALL
+      readOnlyRootFilesystem: true
+      runAsNonRoot: true
+      runAsUser: 1000

core/kube-system/config-syncer.yaml

@@ -2,8 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: kube-system
 resources:
-  - config-syncer.yaml
   - intel-gpu-plugin
+  - kubernetes-replicator.yaml
   - metallb.yaml
   - multus_network.yaml
   - node-feature-discovery